$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/229adfaf-fd4d-3e61-8c34-5dd70d2e6839.roa File: 229adfaf-fd4d-3e61-8c34-5dd70d2e6839.roa (raw, json) Hash identifier: GwhPgTRK1gb5WjjK+emS3IU/hsyHwqTj6PhRR4r0HsY= Subject key identifier: EF:9A:44:63:ED:DB:65:6F:E7:F6:59:86:C6:35:38:C8:44:BA:C8:F9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FA051C7E830FB5163076BB8 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/229adfaf-fd4d-3e61-8c34-5dd70d2e6839.roa Signing time: Fri 04 Sep 2026 07:55:36 +0000 ROA not before: Fri 04 Sep 2026 07:55:36 +0000 ROA not after: Thu 03 Dec 2026 08:55:36 +0000 asID: 30633 IP address blocks: 108.59.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:a0:51:c7:e8:30:fb:51:63:07:6b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 07:55:36 2026 GMT Not After : Dec 3 08:55:36 2026 GMT Subject: CN=1cf9a49f-9864-4ff8-ad0d-111cc7681b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:78:99:1d:4d:52:81:68:62:4e:e3:1f:3b: 4a:89:a6:70:52:89:7c:3b:99:9d:3c:ce:15:5e:da: c6:6a:17:55:e4:f1:36:24:97:35:2d:d0:ad:01:9e: fe:88:2a:29:55:9a:f1:46:50:ac:2c:10:b5:d0:73: c7:1e:d5:ea:74:4e:dc:c6:a7:26:bb:c9:98:89:3f: 1f:d2:4d:e7:b9:06:56:8b:70:83:da:6d:ab:01:3a: 55:5c:f8:d6:47:3b:64:68:42:0c:02:f1:2a:06:d5: fd:96:52:f0:d1:44:1d:4b:bf:5e:fa:d8:3a:f7:fe: 19:88:72:78:dc:7b:5f:ea:94:bb:7a:27:5d:9c:9c: 82:f6:71:ab:c0:24:a3:fc:4e:3e:fc:9d:e3:b9:0f: a9:5b:1e:f4:b7:29:61:78:f8:05:40:02:65:c8:bd: 94:43:5a:84:5e:d6:35:e9:36:3d:02:fe:e0:99:db: d8:44:7c:07:ce:16:82:5a:72:03:ec:87:04:c3:6f: 54:ab:ca:aa:81:d6:be:f8:f2:6d:38:d1:65:b1:25: 40:e9:0c:12:b9:1f:3d:70:e4:9e:7a:4e:2b:f1:f9: 60:81:5f:eb:94:89:98:14:34:65:d3:eb:7e:b2:43: 96:9c:66:e3:3e:38:33:2d:98:ea:f3:ee:29:60:6b: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:44:63:ED:DB:65:6F:E7:F6:59:86:C6:35:38:C8:44:BA:C8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/229adfaf-fd4d-3e61-8c34-5dd70d2e6839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.59.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4c:ea:7f:39:24:3a:3c:2a:6a:bc:5d:b5:e6:fe:f7:cb:8a: 2d:d5:79:6f:6e:77:93:24:34:f1:b1:31:61:e7:bd:67:19:2d: 11:46:ac:66:92:bc:56:5b:b3:eb:68:d4:46:ff:c6:93:1d:07: ee:04:ee:4d:55:12:31:4a:c3:20:22:15:df:55:59:82:c9:b7: e3:de:6f:7a:6b:88:66:1f:b3:99:c5:b9:a4:0f:4c:5d:fa:1c: 7e:71:d4:e7:67:eb:f0:da:24:b4:7d:01:14:fc:a9:a4:74:7a: 24:c1:20:1b:11:82:21:82:6d:3c:f5:d7:e3:51:eb:c5:fb:56: 93:65:3d:81:c8:dd:77:3d:e1:c4:74:35:b0:3d:bd:b8:20:b5: fe:ae:1b:be:f6:1b:ec:8f:6e:56:85:20:46:cd:65:e8:cd:31: ec:85:79:10:00:41:86:f7:b6:61:7e:1b:7e:7a:5c:d1:bf:61: 58:c2:dc:12:9d:db:c3:e1:33:11:e8:c5:61:51:fe:91:46:6f: dc:12:87:31:50:25:53:a4:b1:b4:93:2b:83:15:cb:46:51:e0: d9:a8:d3:4e:33:4e:40:ab:cc:4e:d7:3b:9a:3f:a7:23:17:c3: a8:6c:07:ae:67:da:54:f7:23:97:e1:73:a6:48:81:78:90:8f: 9c:ee:ab:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PoFHH6DD7UWMHa7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA3NTUzNloXDTI2MTIwMzA4NTUzNlowLzEtMCsGA1UEAxMk MWNmOWE0OWYtOTg2NC00ZmY4LWFkMGQtMTExY2M3NjgxYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhct4mR1NUoFoYk7jHztKiaZwUol8O5mdPM4V XtrGahdV5PE2JJc1LdCtAZ7+iCopVZrxRlCsLBC10HPHHtXqdE7cxqcmu8mYiT8f 0k3nuQZWi3CD2m2rATpVXPjWRztkaEIMAvEqBtX9llLw0UQdS79e+tg69/4ZiHJ4 3Htf6pS7eiddnJyC9nGrwCSj/E4+/J3juQ+pWx70tylhePgFQAJlyL2UQ1qEXtY1 6TY9Av7gmdvYRHwHzhaCWnID7IcEw29Uq8qqgda++PJtONFlsSVA6QwSuR89cOSe ek4r8flggV/rlImYFDRl0+t+skOWnGbjPjgzLZjq8+4pYGvvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+aRGPt22Vv5/ZZhsY1OMhEusj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjI5YWRmYWYtZmQ0ZC0z ZTYxLThjMzQtNWRkNzBkMmU2ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbDsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNM6n85JDo8Kmq8XbXm/vfLii3VeW9ud5MkNPGxMWHnvWcZLRFGrGaS vFZbs+to1Eb/xpMdB+4E7k1VEjFKwyAiFd9VWYLJt+Peb3priGYfs5nFuaQPTF36 HH5x1Odn6/DaJLR9ART8qaR0eiTBIBsRgiGCbTz11+NR68X7VpNlPYHI3Xc94cR0 NbA9vbggtf6uG772G+yPblaFIEbNZejNMeyFeRAAQYb3tmF+G356XNG/YVjC3BKd 28PhMxHoxWFR/pFGb9wShzFQJVOksbSTK4MVy0ZR4Nmo004zTkCrzE7XO5o/pyMX w6hsB65n2lT3I5fhc6ZIgXiQj5zuqxk= -----END CERTIFICATE-----Generated at Fri Sep 4 22:13:49 2026 by rpki-client